WatchGuard to Launch New Open MDR Service

WatchGuard Technologies is expanding its managed detection and response (MDR) services with the launch of WatchGuard Open MDR.

Unifying MDR across the entire attack surface

This newest solution builds on WatchGuard’s MDR service by extending 24/7 detection and response to supported third-party tools alongside WatchGuard technologies.

The service will provide organizations with full-stack protection without forcing platform changes. Open MDR extends WatchGuard’s AI-driven security operations center (SOC) across the entire attack surface, turning fragmented signals into coordinated defense.

Key capabilities for the service include:

• Cross-environment coverage: The service works across WatchGuard Firebox, AuthPoint, and EPDR, plus supported tools including Microsoft Defender, CrowdStrike Falcon, Okta Workforce Identity, Microsoft 365, AWS, Google, and third-party firewalls without forcing tool migration.
• AI-driven detection and response: Proprietary AI/ML will reduce noise, validate threats, and initiate response actions in under six minutes, with fewer than one false positive per month.
• Proof of value: Through a unified portal, users gain clear visibility into detections, actions, and outcomes, making MDR value easy to demonstrate in customer reviews and business conversations.

MSPs and customers gain coordinated response through unified operations

“This launch marks a major milestone in our MDR journey,” said Andrew Young, chief product officer at WatchGuard. 

“Open MDR completes the picture – delivering unified detection and response across the entire attack surface and enabling customers to secure real-world, mixed technology stacks with confidence,” Young continued.

Among the benefits for partners and customers are:

• Unified visibility across endpoints, identity, network, cloud, and productivity tools.
• 24/7 expert monitoring and validation.
• Rapid, coordinated response that isolates threats before they spread.
• Freedom from forced migrations to eliminate disruption and lock-in.

The service will unite native WatchGuard integration and select third-party environments into a single operational view. Organizations will be able to benefit from WatchGuard’s integrated security and extend protection across existing supported infrastructure and security tools.

Further, Open MDR is built for MSPs delivering security at scale. 

Partners will retain ownership of customer relationships, and WatchGuard can operate behind the scenes as the SOC, supported by technical account managers (TAMs) for escalation, root-cause analysis, and ongoing security guidance.

WatchGuard Open MDR is available globally through WatchGuard’s network of MSP partners.

This announcement comes on the heels of WatchGuard’s introduction of a new unified zero-trust bundle. Read more about the solution and how it aims to deliver cloud-based zero trust for organizations of all sizes.